Senior IAM Analyst

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior IAM Analyst based in Brazil.

This is a senior cybersecurity role focused on designing, implementing, and maintaining secure identity and access management capabilities across complex technology environments. You will help protect critical systems by strengthening authentication, authorization, privileged access, and identity governance practices. The role combines hands-on technical work with architectural ownership, automation, compliance, and continuous improvement. You will work across hybrid and multi-cloud environments, supporting AWS while contributing to the expansion of identity capabilities in Azure. Your expertise will help establish scalable access controls, secure application integrations, and effective identity workflows. The position also offers exposure to modern security approaches such as Zero Trust, DevSecOps, and machine identity management. You will collaborate with engineering, cybersecurity, business, and audit teams in a fully remote and distributed environment.

Accountabilities:: Design, evolve, and maintain IAM architecture in alignment with security best practices and organizational requirements.

Develop and manage Role-Based Access Control (RBAC) models, including role modeling, role mining, Segregation of Duties (SoD), and role lifecycle management.

Define and enforce Privileged Access Management (PAM) controls for elevated and high-risk accounts.

Implement and maintain Identity Governance and Administration (IGA) processes, including access certifications, periodic reviews, and compliance controls.

Configure and administer IAM platforms such as Okta, Ping Identity, and Microsoft Entra ID.

Integrate internal and external applications securely with enterprise IAM solutions.

Develop and maintain automation for provisioning, deprovisioning, access reviews, and other identity workflows using Python, PowerShell, Bash, or similar technologies.

Operate IAM services in AWS environments and support the expansion of identity capabilities into Azure.

Apply secure identity and access management practices across multi-cloud environments.

Establish and maintain IAM governance, policies, standards, and regulatory compliance processes.

Support internal and external audits, access reviews, and other identity-related assurance activities.

Integrate IAM controls into DevSecOps and CI/CD pipelines, including secure management of service accounts, machine identities, and automated workloads.

Contribute to Zero Trust security initiatives and broader identity security improvements.

Collaborate with engineering, security, business, and audit stakeholders to deliver secure, efficient, and scalable identity workflows.

Requirements:

Bachelor’s degree in Computer Science, Engineering, Information Systems, or a related field.

Based in Brazil and proficient in English at a B2 level or above.

Strong hands-on experience configuring and administering IAM platforms such as Okta, Ping Identity, or Microsoft Entra ID.

Solid understanding of RBAC methodologies, identity governance, access management, and privileged access controls.

Experience working with cloud environments for identity management and cybersecurity, with Azure knowledge considered an advantage.

Familiarity with authentication and authorization protocols, including SAML, OAuth 2.0, and OpenID Connect.

Experience with IAM integrations across enterprise applications and technology environments.

Proficiency in automation and scripting using Python, PowerShell, Bash, or comparable languages.

Experience integrating identity controls into DevSecOps and CI/CD environments, including service accounts, machine identities, and automated workloads.

Knowledge of Zero Trust Architecture and modern identity security practices.

Strong analytical and problem-solving capabilities, with the ability to investigate complex identity and access challenges.

Excellent communication skills and the ability to work effectively with technical teams, business stakeholders, and auditors.

Ability to work independently while collaborating effectively across distributed and multicultural teams.

Relevant certifications such as Okta Certified Professional, Ping Identity certifications, AWS Security Specialty, or Microsoft Identity and Access Administrator are a plus.

Benefits:

Fully remote position based in Brazil.

Opportunity to work on enterprise-scale Identity and Access Management and cybersecurity initiatives.

Exposure to modern IAM platforms, including Okta, Ping Identity, and Microsoft Entra ID.

Hands-on experience across AWS and Azure cloud environments.

Opportunity to contribute to Zero Trust, DevSecOps, automation, and multi-cloud security initiatives.

Collaboration with distributed, multicultural, and cross-functional teams.

Opportunity to develop expertise in identity governance, privileged access, compliance, and security architecture.

Professional growth through exposure to complex technical and cybersecurity challenges.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether?    Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.     #LI-CL1